Medicare and Medicaid participation works differently from a lender or a landlord. A lender hands you an insurance schedule and requires compliance. A payer does not; it imposes operating requirements, set out for long-term care facilities at 42 CFR Part 483, and enforcement of those requirements produces exposures that your insurance program either addresses or does not.
There are four worth working through, and most senior care programs handle one or two of them well and the rest by accident.
One: survey and certification
Certified facilities are surveyed on a recurring cycle under CMS authority, and deficiencies are cited at a scope and severity level. The most serious level, immediate jeopardy, triggers a fast and consequential response involving healthcare regulatory counsel and often an outside clinical consultant.
That spend runs on a regulatory timetable rather than a litigation one, which means the operator cannot control the pace. Regulatory and survey defense coverage exists for it, and the term that decides its value is when it triggers: at the survey and plan of correction stage, where the expensive work happens, or only once a formal administrative proceeding exists, which is after most of the money is spent.
Two: civil money penalties
Penalties themselves are generally treated as uninsurable, on the same public policy reasoning that applies to punitive damages: an insurer paying the penalty would defeat its deterrent purpose. Any operator being told a policy will pay their penalties should read that grant very carefully.
What is insurable is the defense. So the practical planning question is not how to insure the penalty, it is how to fund the response and how to avoid the finding, and the second of those is a quality assurance question rather than an insurance one.
Three: resident trust funds
Facilities routinely hold personal funds on behalf of residents, and federal requirements govern how those funds must be managed, accounted for and assured. A shortfall is both a financial loss and a regulatory violation.
The coverage trap is that a standard crime policy insures loss of the organization own money and property. Resident funds are held in a fiduciary capacity, and some forms do not reach them without a specific extension. Confirm the extension is endorsed rather than described, and confirm the limit is sized against the aggregate balance the trust account actually carries. Then reconcile the account regularly and independently, because that reconciliation is what a surveyor asks for and what makes an insurance claim provable.
Four: post-payment billing review
Participating providers are subject to review of billing by government contractors. A billing errors and omissions grant covers the cost of defending those reviews. It does not cover repayment of an overpayment, and correctly so: an overpayment is money that was never yours.
What operators underestimate is the defense cost. These reviews are document-intensive, frequently extrapolate from a sample across a large claim universe, and run through a multi-level appeal process that can take years. Check the sublimit, check whether it covers pre-litigation audit response rather than only formal proceedings, and check how the intentional conduct exclusion is worded, because a version excluding at the point of allegation rather than final adjudication provides much less than it appears to.
The one that connects them all
A serious survey finding frequently precedes civil litigation about the same events, and the two feed each other: statements made and documents produced in the regulatory process are available to a plaintiff. Handling the regulatory response without regard to the civil case that may follow is how operators create their own worst evidence.
That is an argument for a regulatory defense grant that triggers early, and for having counsel involved who understands both tracks from the first day rather than the second.